2022

Improper validation of buffer size input to the EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Co

Possible assertion due to improper validation of OTA configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Co

Possible buffer overflow due to improper data validation of external commands sent via DIAG interface in Snapdragon Auto

Possible assertion due to improper validation of TCI configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Co

Possible assertion due to improper validation of invalid NR CSI-IM resource configuration in Snapdragon Auto, Snapdragon

Improper cleaning of secure memory between authenticated users can lead to face authentication bypass in Snapdragon Auto

Improper handling of permissions of a shared memory region can lead to memory corruption in Snapdragon Auto, Snapdragon

Asciidoctor-include-ext is Asciidoctor’s standard include processor reimplemented as an extension. Versions prior to 0.4

deepmerge-ts is a typescript library providing functionality to deep merging of javascript objects. deepmerge-ts is vuln

Xshell v7.0.0099 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a

Xlpd v7.0.0094 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a c

Xmanager v7.0.0096 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via

Xftp 7.0.0088p and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a c

FreeFtpd version 1.0.13 and below contains an unquoted service path vulnerability which allows local users to launch pro

BitComet Service for Windows before version 1.8.6 contains an unquoted service path vulnerability which allows attackers

Raidrive before v2021.12.35 allows attackers to arbitrarily move log files by pre-creating a mountpoint and log files be

Internet Routing Registry daemon version 4 is an IRR database server, processing IRR objects in the RPSL format. IRRd di

Pomerium is an identity-aware access proxy. In distributed service mode, Pomerium's Authenticate service exposes pprof d

RaspberryMatic is a free and open-source operating system for running a cloud-free smart-home using the homematicIP / Ho

Express OpenID Connect is an Express JS middleware implementing sign on for Express web apps using OpenID Connect. Users

Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cranelift. There is a use after free vulnerability in

The Jupyter notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.9, unauthorized

Hospital Management System v1.0 was discovered to lack an authorization component, allowing attackers to access sensitiv

D-Link DIR-645 1.03 A1 is vulnerable to Buffer Overflow. The hnap_main function in the cgibin handler uses sprintf to fo

Cross Site Scripting (XSS) vulnerability exists in Maccms v10 via link_Name parameter.

A Remote Code Execution (RCE) vulnerability exists in The-Secretary 2.5 via install.php.

A Remote Code Execution (RCE) vulnerability exists in Simple Client Management System 1.0 in create.php due to the failu

A vulnerability exists in Hoosk 1.8.0 in /install/index.php, due to a failure to check if config.php already exists in t

An Access Control vulnerability exists in Dolibarr ERP/CRM 13.0.2, fixed version is 14.0.0,in the forgot-password functi

IBM Security Verify Access could allow a user, using man in the middle techniques, to obtain sensitive information or po

A Cross Site Scripting (XSS) vulnerability exists in htmly.2.8.1 via the Copyright field in the /admin/config page.

A Cross Site Scripting (XSS) vulnerability exists in Chikista Patient Management Software 2.0.2 via the last_name parame

A Cross Site Scripting (XSS) vulnerability exists in Chikista Patient Management Software 2.0.2 in the first_name parame

A Cross Site Scripting (XSS) vulnerability exists in DanPros htmly 2.8.1 via the Description field in (1) admin/config,

A Cross Site Scripting vulnerabilty exists in Pixelimity 1.0 via the Site Description field in pixelimity/admin/setting.

An SQL Injection vulnerability exists in Dolibarr ERP/CRM 13.0.2 (fixed version is 14.0.0) via a POST request to the cou

An SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the password parameter i

Multiple Cross Site Scripting (XSS) vulnerabilities exist in Ssourcecodester Simple Client Management System v1 via (1)

Cross-site Scripting (XSS) - Stored in GitHub repository vanessa219/vditor prior to 3.8.13.

Multiple Remote Code Execution (RCE) vulnerabilities exist in WPanel 4 4.3.1 and below via a malicious PHP file upload t

Hospital Management System v1.0 is affected by an unrestricted upload of dangerous file type vulerability in treatmentre

Loose comparison causes IDOR on multiple endpoints in GitHub repository livehelperchat/livehelperchat prior to 3.96.

Improper access control vulnerability in ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmwa

SSRF on index.php/cobrowse/proxycss/ in GitHub repository livehelperchat/livehelperchat prior to 3.96.

Untrusted search path vulnerability in AttacheCase ver.3.6.1.0 and earlier allows an attacker to gain privileges and exe

Cross-site scripting vulnerability in Zero-channel BBS Plus v0.7.4 and earlier allows a remote attacker to inject an arb

Improper access control vulnerability in pfSense CE and pfSense Plus (pfSense CE software versions prior to 2.6.0 and pf

Untrusted search path vulnerability in AttacheCase ver.4.0.2.7 and earlier allows an attacker to gain privileges and exe

Improper input validation vulnerability in pfSense CE and pfSense Plus (pfSense CE software versions prior to 2.6.0 and

Missing authorization vulnerability in Advanced Custom Fields versions prior to 5.12.1 and Advanced Custom Fields Pro ve